This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: uQg2HQaFGqVvM+yjwoEKy8gUlQ3BTJhtBUayM3ATzUQ=
Subject key identifier: 10:65:D7:2D:AC:DC:34:13:AB:70:53:AA:7B:91:33:8C:8A:E3:B6:6A
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019AF2ADBAD712441B20135258D818269EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 0C0E
Signing time: Sat 06 Dec 2025 08:01:03 +0000
Manifest this update: Sat 06 Dec 2025 08:01:03 +0000
Manifest next update: Sun 07 Dec 2025 08:01:03 +0000
Files and hashes: 1: 7Z9cH1C8XPNJTxdsgH0ox-pTxZg.roa (hash: 4+TklJPq6Xjl0HFZYNmTMPoe1Qx5I4KGqW30JOPepMU=)
2: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: d5EPQ3LUGtZuW9LjeSIpJOXWRK484+X0zj7+or1IR5o=)
3: MGVL3PWcg672eUJnE3OmpM02shQ.roa (hash: jaWN7PLFw0laWd8mU2a0x2xqPQpnAcAJ/82ZDzopnzE=)
4: XOvbyx3UQe3ioe3WIioqTg18gLc.roa (hash: ea9vAcTvRvN3FKh7IaXOQom5/auFDGoilHFurQmTuD0=)
5: c4yvyMKIOxEnq8qnOJowF2Jzm7s.roa (hash: s8IHGFPKGHVe+UT4NM56ryEb8GnNOyNh3KVfvOyTvrs=)
6: xsTVjIeVJzqy3Dly9i83AhLsDng.roa (hash: ivpCGfFhECEPmQVaRhGvlFpdc3270xnQ6EhBDnMhaxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:ad:ba:d7:12:44:1b:20:13:52:58:d8:18:26:9e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Dec 6 08:01:03 2025 GMT
Not After : Dec 7 08:01:03 2025 GMT
Subject: CN=1065d72dacdc3413ab7053aa7b91338c8ae3b66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:ab:ca:be:d2:36:7b:27:8a:bd:35:f2:06:
e0:5f:e5:c2:bd:a7:66:77:ca:e9:9e:90:e2:ca:a6:
aa:02:f9:b4:e7:a6:b4:b0:a8:81:5f:c0:41:d4:2c:
d5:19:8c:45:83:ae:85:38:b7:93:f8:fc:72:4b:70:
ac:43:6d:ac:bb:97:f1:0a:e4:7d:5a:86:62:9b:39:
0f:10:40:af:ed:c0:76:3e:a0:1d:fc:54:b5:a3:07:
f1:0a:24:93:71:ec:97:71:f9:dc:31:ad:55:a4:b7:
e3:ee:42:27:63:32:e3:b8:18:15:76:8f:73:fd:0f:
44:37:6c:2e:c4:1d:b7:89:a3:32:98:ec:ae:c2:fe:
da:bb:07:b6:d2:4e:fb:41:7f:01:80:78:88:b8:ac:
e1:72:86:8a:69:5a:cf:f0:6c:1f:63:0b:de:44:e9:
b9:a9:2c:e8:36:a8:d7:8a:fe:d0:a3:39:bb:e7:c5:
0d:6a:28:64:37:bd:0c:2b:3c:05:35:c5:2e:4c:d2:
12:3d:8e:d9:da:60:a9:e2:7b:4a:cc:44:7d:49:26:
06:92:94:76:ba:71:39:84:2f:ee:55:88:ee:9e:79:
5d:a9:9e:50:2f:0e:67:1b:16:47:77:60:ba:b3:31:
8b:94:14:3a:cb:6a:a3:24:b8:2e:23:ae:fe:4d:ac:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:65:D7:2D:AC:DC:34:13:AB:70:53:AA:7B:91:33:8C:8A:E3:B6:6A
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:56:ea:e6:36:27:94:2a:46:83:96:df:0a:0e:cd:62:ba:78:
d6:0a:42:76:b4:f1:f1:ac:a9:a8:ed:10:31:43:0b:0c:7f:3e:
11:e6:c7:25:20:dd:7b:4c:de:2c:bc:24:90:8b:f4:5e:1e:28:
f7:f1:bd:5a:7c:e6:54:3b:ec:b8:a2:09:ce:1d:f2:8e:a5:2a:
c4:18:8a:41:9c:16:6b:d3:8f:a3:0c:ed:ff:d5:e2:a7:9d:8d:
85:06:cf:39:08:63:ed:45:ee:6d:4b:f7:0b:17:0a:aa:2f:26:
57:6a:c1:ea:f5:98:78:99:0c:b7:dc:3d:be:9c:2b:d4:36:1e:
62:40:9d:33:73:70:83:8d:c5:f1:a6:85:dc:a8:26:3e:dd:fe:
58:3b:78:5b:97:54:93:c2:1a:e8:c7:b6:ea:5d:99:cb:3d:27:
ce:fe:8f:59:a4:c5:d2:b7:92:1f:cc:92:48:44:ff:fa:f4:b5:
4b:44:9f:03:6a:9d:e1:6e:e0:5c:79:15:02:15:b0:de:8c:0d:
75:03:ef:98:bf:00:ec:84:0a:c8:9b:1e:d1:9c:64:56:16:87:
d6:54:33:ca:f8:09:4a:ee:b9:f0:65:c4:62:77:f2:a5:86:64:
61:b7:01:fe:0b:87:1e:74:29:1c:10:83:40:8f:57:21:6e:72:
60:e3:39:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:59:57 2025 by rpki-client